Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files.Check if you run itEPSS 0.38%Jun 18, 2025
- High7.2The Versa Director SD-WAN orchestration platform provides an option to upload various types of files.Check if you run itEPSS 0.56%Jun 18, 2025
- Critical9.8The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service.Check if you run itEPSS 0.86%Jun 18, 2025
- Medium6.3The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS.Check if you run itEPSS 0.40%Jun 18, 2025
- High7.2A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code.Check this weekEPSS 19.07%Jun 18, 2025
- High7.2The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints.Check if you run itEPSS 1.12%Jun 18, 2025
- High7.5The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI.Check if you run itEPSS 0.62%Jun 18, 2025
- Medium6.7The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box.Check if you run itEPSS 0.60%Jun 18, 2025
- Medium6.1The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo.Check if you run itEPSS 0.39%Jun 18, 2025
- Critical9.9A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain userCheck this weekEPSS 24.74%Jun 18, 2025
- Medium6.1A vulnerability allowing local system users to modify directory contents, allowing for arbitrary code execution on the local system with elevated permissions.Check if you run itEPSS 0.26%Jun 18, 2025
- High7.4CryptPad is a collaboration suite.Check if you run itEPSS 0.52%Jun 18, 2025
- Low2.9CryptPad is a collaboration suite.Check if you run itEPSS 0.33%Jun 18, 2025
- High8.8Use after free in Metrics in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.45%Jun 18, 2025
- High8.8Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.Check this weekEPSS 11.58%Jun 18, 2025
- Critical9.8A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) conditCheck if you run itEPSS 1.63%Jun 18, 2025
- Medium5.5IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.21%Jun 18, 2025
- Medium4.0IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allow a local user to obtain sensitive information from a user’sCheck if you run itEPSS 0.14%Jun 18, 2025
- Medium4.3IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site request forgery which could allow an attacCheck if you run itEPSS 0.14%Jun 18, 2025
- High8.8IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.Check if you run itEPSS 0.65%Jun 18, 2025
- High7.2IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privileges when handling external entities due to execution with unneCheck if you run itEPSS 0.49%Jun 18, 2025
- Medium4.9Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificatesCheck if you run itEPSS 0.23%Jun 18, 2025
- Medium5.4IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnerable to cross-site scripting.Check if you run itEPSS 0.21%Jun 18, 2025
- High7.2The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versionsCheck if you run itEPSS 1.09%Jun 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: arm64: set UXN on swapper page tables [ This issue was fixed upstream by accident in c3cee924bd85 ("arm64: head:Check if you run itEPSS 0.20%Jun 18, 2025
Sort